Privacy Policy

Information used for an identification

When you submit a request, the service processes the selected spider photos and any broad location, observations, exposure status, or embedded photo coordinates you explicitly choose to share. Do not upload images showing people, addresses, documents, or other visible identifying details.

Original photo EXIF is inspected locally in your browser. Coordinates leave the browser only when a selected photo contains them and you check the separate sharing control. Photos are compressed and re-encoded before transmission, then validated and re-encoded again on the server.

Service providers and purposes

Vercel hosts the website and request function. OpenAI processes the metadata-free images and supplied context to produce the requested identification. Upstash stores short-lived quota counters. These providers may process request and technical data under their own service terms and data controls.

Anonymous limits and technical data

A strictly necessary cookie contains a signed random anonymous browser identifier. The server also derives an HMAC-pseudonymized IP address key for abuse prevention. Redis stores only those keyed digests, request counts, and the next UTC reset time. It does not store the raw cookie identifier or raw IP address in quota keys. The counters expire at the daily reset, while the browser cookie lasts up to 30 days.

Hosting and security infrastructure may separately process IP addresses, request times, routes, and device or browser information for delivery, reliability, fraud prevention, and security logging.

Photo storage and provider processing

This application does not save submitted photos or the identification result after responding. Photos are processed in memory and sent to OpenAI for the requested identification with provider response storage disabled. Vercel and OpenAI processing, including technical or security logs, remains subject to their applicable controls.

Your choices and requests

Broad location, embedded coordinates, observations, and exposure status are optional. You can clear the anonymous browser cookie, although doing so does not erase infrastructure logs and may not avoid network-level abuse controls.

To ask a privacy question or request action concerning information reasonably linked to you, use the private project contact form. The operator may need to verify the request and may retain information when required for security or law.

Children, international processing, and changes

The service is not directed to children under 13, and children should not submit photos or personal information without a parent or guardian. Providers may process information in countries other than yours. This policy may change as the service or legal requirements change; the effective date above identifies the current version.